Privacy Policy

Last updated: 30 October 2026

1. Who we are

Rentosfera is a trading name of Optimind SLU, a company registered in Madrid, Spain, with tax identification number ESB16497422 (“we”, “our”, “us”). Optimind SLU is the data controller for the personal data described in this policy. Registered address: Madrid, Spain. Contact: legal@rentosfera.com. Data Protection Officer: legal@rentosfera.com.

2. Personal data we collect

Account data: name, email, phone, password credentials, preferred language and role.
Property data: addresses, descriptions, photos and building information.
Tenancy data: tenancy dates, agreements, tenant contact details and invitations.
Financial data: rent amounts, payment records, IBAN, SEPA mandate data and proof of payment.
Identity/KYC data where enabled: identity document details, verification status and liveness results.
Communications: support tickets, comments, notifications and attachments.
Technical data: IP address (masked where used for risk signals), device/browser, session and analytics data.

3. Purposes and legal bases

We process personal data to provide the property-management service (contract, Art. 6(1)(b) GDPR); comply with tax, accounting and anti-fraud obligations (legal obligation, Art. 6(1)(c)); protect the platform, prevent fraud and improve the service (legitimate interests, Art. 6(1)(f)); and send optional analytics or marketing communications (consent, Art. 6(1)(a)).

We share data with service providers acting on our instructions, including Supabase (database and authentication), Vercel (hosting), Resend (email), Stripe (payments), Didit (identity verification), YouSign (e-signature), KILT (blockchain identity) and Forgejo (content management). We do not sell personal data. A current list is available on request.

5. International transfers

Where a provider processes data outside the EEA, we rely on adequacy decisions or Standard Contractual Clauses and apply appropriate safeguards.

6. Retention

Financial records: 7 years (legal requirement).
Tenancy data: 3 years after the tenancy ends.
Account data: until account deletion, plus 14 days.
Analytics data: 2 years where consent is given.
Support tickets: 3 years after resolution.
Risk and fraud signals: as long as necessary for the legitimate interest, then deleted or anonymised.

7. Your rights

You may request access, rectification, erasure, restriction, portability or object to processing; withdraw consent at any time; and lodge a complaint with the Spanish supervisory authority (AEPD, Madrid) or your local authority. Contact legal@rentosfera.com.

8. Cookies

We use strictly necessary cookies for authentication and preferences, and analytics cookies only with consent. See the Cookie Policy.

9. Security

We use encryption in transit, access controls, row-level security, audit logs and least-privilege service credentials. No system is completely secure; report suspected incidents to support@rentosfera.com.

10. Children

The service is not intended for children under 18. We do not knowingly collect their data.

11. Changes

We may update this policy; material changes will be notified in the service or by email. The “last updated” date reflects the current version.

12. Contact

Optimind SLU, Madrid, Spain, ESB16497422 — legal@rentosfera.com.